ESXi Admin Permission Assigned To Account Via ESXCLI (9691f58d-92c1-4416-8bf3-2edd753ec9cf)

Detects execution of the "esxcli" command with the "system" and "permission" flags in order to assign admin permissions to an account.

Cluster A	Galaxy A	Cluster B	Galaxy B	Level
ESXi Admin Permission Assigned To Account Via ESXCLI (9691f58d-92c1-4416-8bf3-2edd753ec9cf)	Sigma-Rules	Hypervisor CLI - T1059.012 (d2d642da-61ff-4211-b4df-7923c9ca220c)	Attack Pattern	1
ESXi Admin Permission Assigned To Account Via ESXCLI (9691f58d-92c1-4416-8bf3-2edd753ec9cf)	Sigma-Rules	Account Manipulation - T1098 (a10641f4-87b4-45a3-a906-92a149cb2c27)	Attack Pattern	1
Command and Scripting Interpreter - T1059 (7385dfaf-6886-4229-9ecd-6fd678040830)	Attack Pattern	Hypervisor CLI - T1059.012 (d2d642da-61ff-4211-b4df-7923c9ca220c)	Attack Pattern	2